Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Revert "Bump chai from 4.3.1 to 5.1.0" #772

Merged
merged 1 commit into from
Feb 20, 2024

Conversation

OrShamirCM
Copy link
Contributor

Reverts #768

@pedrompflopes pedrompflopes requested review from a team, margaritalm and tiagobcx and removed request for a team February 20, 2024 08:14
Copy link
Contributor

Logo
Checkmarx One – Scan Summary & Details3a388225-fd69-4f7a-8930-c9ba7654b3e7

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH Client_DOM_XSS /media/view.js: 236 Attack Vector
HIGH Client_DOM_XSS /media/gpt.js: 105 Attack Vector
HIGH Client_DOM_XSS /media/gpt.js: 105 Attack Vector
HIGH Cxab55612e-3a56 Npm-braces-3.0.2 Vulnerable Package
HIGH Cxca84a1c2-1f12 Npm-micromatch-4.0.5 Vulnerable Package
MEDIUM Missing_HSTS_Header /src/resources/testProj/insecure.php: 24 Attack Vector
MEDIUM Unpinned Actions Full Length Commit SHA /delete-dev-releases.yml: 28 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /pr-label.yml: 15 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 136 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 158 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /checkmarx-one-scan.yml: 12 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /dependabot-auto-merge.yml: 23 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /dependabot-auto-merge.yml: 14 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

Fixed Issues

Severity Issue Source File / Package
HIGH Client_DOM_XSS /media/gpt.js: 122
HIGH Client_DOM_XSS /media/gpt.js: 122
HIGH Client_DOM_XSS /media/view.js: 247

@OrShamirCM OrShamirCM merged commit 5c1b85f into main Feb 20, 2024
7 checks passed
@OrShamirCM OrShamirCM deleted the revert-768-dependabot/npm_and_yarn/chai-5.1.0 branch February 20, 2024 08:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant